@anthropic-ai/sdk 0.120.0 → 0.121.0

package/resources/beta/organization/service-accounts/service-accounts.js

@@ -0,0 +1,174 @@
+"use strict";
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ServiceAccounts = void 0;
+const tslib_1 = require("../../../../internal/tslib.js");
+const resource_1 = require("../../../../core/resource.js");
+const WorkspacesAPI = tslib_1.__importStar(require("./workspaces.js"));
+const workspaces_1 = require("./workspaces.js");
+const pagination_1 = require("../../../../core/pagination.js");
+const headers_1 = require("../../../../internal/headers.js");
+const path_1 = require("../../../../internal/utils/path.js");
+class ServiceAccounts extends resource_1.APIResource {
+    constructor() {
+        super(...arguments);
+        this.workspaces = new WorkspacesAPI.Workspaces(this._client);
+    }
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
+     *
+     * Create a service account.
+     *
+     * A service account is a named workload identity that federation rules target.
+     * `organization_role` is `developer` (default) or `admin`; a rule may only be
+     * created or retargeted to grant `org:admin` scope when the target's
+     * `organization_role` is `admin`. Creating an `admin`-role service account
+     * requires an interactive credential (a user OAuth token or a Console session) — a
+     * workload may only create `developer`-role service accounts.
+     *
+     * @example
+     * ```ts
+     * const betaServiceAccount =
+     *   await client.beta.organization.serviceAccounts.create({
+     *     name: 'ci-deploy-bot',
+     *   });
+     * ```
+     */
+    create(params, options) {
+        const { betas, ...body } = params;
+        return this._client.post('/v1/organizations/service_accounts?beta=true', {
+            body,
+            ...options,
+            headers: (0, headers_1.buildHeaders)([
+                { ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined) },
+                options?.headers,
+            ]),
+        });
+    }
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
+     *
+     * Retrieve a service account by its ID (`svac_...`).
+     *
+     * @example
+     * ```ts
+     * const betaServiceAccount =
+     *   await client.beta.organization.serviceAccounts.retrieve(
+     *     'service_account_id',
+     *   );
+     * ```
+     */
+    retrieve(serviceAccountID, params = {}, options) {
+        const { betas } = params ?? {};
+        return this._client.get((0, path_1.path) `/v1/organizations/service_accounts/${serviceAccountID}?beta=true`, {
+            ...options,
+            headers: (0, headers_1.buildHeaders)([
+                { ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined) },
+                options?.headers,
+            ]),
+        });
+    }
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
+     *
+     * Update a service account.
+     *
+     * Only `description` and `organization_role` are mutable; `name` cannot be
+     * changed. Archived service accounts cannot be updated; this returns 400. Setting
+     * `organization_role` to `admin` (even when unchanged) requires an interactive
+     * credential (a user OAuth token or a Console session).
+     *
+     * @example
+     * ```ts
+     * const betaServiceAccount =
+     *   await client.beta.organization.serviceAccounts.update(
+     *     'service_account_id',
+     *   );
+     * ```
+     */
+    update(serviceAccountID, params, options) {
+        const { betas, ...body } = params;
+        return this._client.post((0, path_1.path) `/v1/organizations/service_accounts/${serviceAccountID}?beta=true`, {
+            body,
+            ...options,
+            headers: (0, headers_1.buildHeaders)([
+                { ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined) },
+                options?.headers,
+            ]),
+        });
+    }
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
+     *
+     * List service accounts in the caller's organization.
+     *
+     * Results are ordered by creation time, newest first. Use `limit` and the
+     * `next_page` cursor to paginate; set `include_archived=true` to include archived
+     * service accounts.
+     *
+     * @example
+     * ```ts
+     * // Automatically fetches more pages as needed.
+     * for await (const betaServiceAccount of client.beta.organization.serviceAccounts.list()) {
+     *   // ...
+     * }
+     * ```
+     */
+    list(params = {}, options) {
+        const { betas, ...query } = params ?? {};
+        return this._client.getAPIList('/v1/organizations/service_accounts?beta=true', (pagination_1.PageCursor), {
+            query,
+            ...options,
+            headers: (0, headers_1.buildHeaders)([
+                { ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined) },
+                options?.headers,
+            ]),
+        });
+    }
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
+     *
+     * Archive a service account.
+     *
+     * Idempotent; re-archiving returns the service account with its original
+     * `archived_at`. Rejected with 400 if any live (non-archived) federation rule
+     * still targets this service account, same as issuer archival; archive those rules
+     * first or change their target to another service account.
+     *
+     * @example
+     * ```ts
+     * const betaServiceAccount =
+     *   await client.beta.organization.serviceAccounts.archive(
+     *     'service_account_id',
+     *   );
+     * ```
+     */
+    archive(serviceAccountID, params = {}, options) {
+        const { betas } = params ?? {};
+        return this._client.post((0, path_1.path) `/v1/organizations/service_accounts/${serviceAccountID}/archive?beta=true`, {
+            ...options,
+            headers: (0, headers_1.buildHeaders)([
+                { ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined) },
+                options?.headers,
+            ]),
+        });
+    }
+}
+exports.ServiceAccounts = ServiceAccounts;
+ServiceAccounts.Workspaces = workspaces_1.Workspaces;
+//# sourceMappingURL=service-accounts.js.map

package/resources/beta/organization/service-accounts/service-accounts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-accounts.js","sourceRoot":"","sources":["../../../../src/resources/beta/organization/service-accounts/service-accounts.ts"],"names":[],"mappings":";AAAA,sFAAsF;;;;AAEtF,2DAAwD;AAExD,uEAA8C;AAC9C,gDAMsB;AAGtB,+DAA6F;AAC7F,6DAA4D;AAE5D,6DAAuD;AAEvD,MAAa,eAAgB,SAAQ,sBAAW;IAAhD;;QACE,eAAU,GAA6B,IAAI,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAmLpF,CAAC;IAjLC;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,MAAM,CAAC,MAAkC,EAAE,OAAwB;QACjE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;QAClC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,8CAA8C,EAAE;YACvE,IAAI;YACJ,GAAG,OAAO;YACV,OAAO,EAAE,IAAA,sBAAY,EAAC;gBACpB,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE;gBACxF,OAAO,EAAE,OAAO;aACjB,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CACN,gBAAwB,EACxB,SAA0D,EAAE,EAC5D,OAAwB;QAExB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAA,WAAI,EAAA,sCAAsC,gBAAgB,YAAY,EAAE;YAC9F,GAAG,OAAO;YACV,OAAO,EAAE,IAAA,sBAAY,EAAC;gBACpB,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE;gBACxF,OAAO,EAAE,OAAO;aACjB,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,MAAM,CACJ,gBAAwB,EACxB,MAAkC,EAClC,OAAwB;QAExB,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;QAClC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAA,WAAI,EAAA,sCAAsC,gBAAgB,YAAY,EAAE;YAC/F,IAAI;YACJ,GAAG,OAAO;YACV,OAAO,EAAE,IAAA,sBAAY,EAAC;gBACpB,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE;gBACxF,OAAO,EAAE,OAAO;aACjB,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACH,IAAI,CACF,SAAsD,EAAE,EACxD,OAAwB;QAExB,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAC5B,8CAA8C,EAC9C,CAAA,uBAA8B,CAAA,EAC9B;YACE,KAAK;YACL,GAAG,OAAO;YACV,OAAO,EAAE,IAAA,sBAAY,EAAC;gBACpB,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE;gBACxF,OAAO,EAAE,OAAO;aACjB,CAAC;SACH,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,OAAO,CACL,gBAAwB,EACxB,SAAyD,EAAE,EAC3D,OAAwB;QAExB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAA,WAAI,EAAA,sCAAsC,gBAAgB,oBAAoB,EAAE;YACvG,GAAG,OAAO;YACV,OAAO,EAAE,IAAA,sBAAY,EAAC;gBACpB,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE;gBACxF,OAAO,EAAE,OAAO;aACjB,CAAC;SACH,CAAC,CAAC;IACL,CAAC;CACF;AApLD,0CAoLC;AAwKD,eAAe,CAAC,UAAU,GAAG,uBAAU,CAAC"}

package/resources/beta/organization/service-accounts/service-accounts.mjs

@@ -0,0 +1,169 @@
+// File generated from our OpenAPI spec by Stainless. See CONTRIBUTING.md for details.
+import { APIResource } from "../../../../core/resource.mjs";
+import * as WorkspacesAPI from "./workspaces.mjs";
+import { Workspaces, } from "./workspaces.mjs";
+import { PageCursor } from "../../../../core/pagination.mjs";
+import { buildHeaders } from "../../../../internal/headers.mjs";
+import { path } from "../../../../internal/utils/path.mjs";
+export class ServiceAccounts extends APIResource {
+    constructor() {
+        super(...arguments);
+        this.workspaces = new WorkspacesAPI.Workspaces(this._client);
+    }
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
+     *
+     * Create a service account.
+     *
+     * A service account is a named workload identity that federation rules target.
+     * `organization_role` is `developer` (default) or `admin`; a rule may only be
+     * created or retargeted to grant `org:admin` scope when the target's
+     * `organization_role` is `admin`. Creating an `admin`-role service account
+     * requires an interactive credential (a user OAuth token or a Console session) — a
+     * workload may only create `developer`-role service accounts.
+     *
+     * @example
+     * ```ts
+     * const betaServiceAccount =
+     *   await client.beta.organization.serviceAccounts.create({
+     *     name: 'ci-deploy-bot',
+     *   });
+     * ```
+     */
+    create(params, options) {
+        const { betas, ...body } = params;
+        return this._client.post('/v1/organizations/service_accounts?beta=true', {
+            body,
+            ...options,
+            headers: buildHeaders([
+                { ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined) },
+                options?.headers,
+            ]),
+        });
+    }
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
+     *
+     * Retrieve a service account by its ID (`svac_...`).
+     *
+     * @example
+     * ```ts
+     * const betaServiceAccount =
+     *   await client.beta.organization.serviceAccounts.retrieve(
+     *     'service_account_id',
+     *   );
+     * ```
+     */
+    retrieve(serviceAccountID, params = {}, options) {
+        const { betas } = params ?? {};
+        return this._client.get(path `/v1/organizations/service_accounts/${serviceAccountID}?beta=true`, {
+            ...options,
+            headers: buildHeaders([
+                { ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined) },
+                options?.headers,
+            ]),
+        });
+    }
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
+     *
+     * Update a service account.
+     *
+     * Only `description` and `organization_role` are mutable; `name` cannot be
+     * changed. Archived service accounts cannot be updated; this returns 400. Setting
+     * `organization_role` to `admin` (even when unchanged) requires an interactive
+     * credential (a user OAuth token or a Console session).
+     *
+     * @example
+     * ```ts
+     * const betaServiceAccount =
+     *   await client.beta.organization.serviceAccounts.update(
+     *     'service_account_id',
+     *   );
+     * ```
+     */
+    update(serviceAccountID, params, options) {
+        const { betas, ...body } = params;
+        return this._client.post(path `/v1/organizations/service_accounts/${serviceAccountID}?beta=true`, {
+            body,
+            ...options,
+            headers: buildHeaders([
+                { ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined) },
+                options?.headers,
+            ]),
+        });
+    }
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
+     *
+     * List service accounts in the caller's organization.
+     *
+     * Results are ordered by creation time, newest first. Use `limit` and the
+     * `next_page` cursor to paginate; set `include_archived=true` to include archived
+     * service accounts.
+     *
+     * @example
+     * ```ts
+     * // Automatically fetches more pages as needed.
+     * for await (const betaServiceAccount of client.beta.organization.serviceAccounts.list()) {
+     *   // ...
+     * }
+     * ```
+     */
+    list(params = {}, options) {
+        const { betas, ...query } = params ?? {};
+        return this._client.getAPIList('/v1/organizations/service_accounts?beta=true', (PageCursor), {
+            query,
+            ...options,
+            headers: buildHeaders([
+                { ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined) },
+                options?.headers,
+            ]),
+        });
+    }
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
+     *
+     * Archive a service account.
+     *
+     * Idempotent; re-archiving returns the service account with its original
+     * `archived_at`. Rejected with 400 if any live (non-archived) federation rule
+     * still targets this service account, same as issuer archival; archive those rules
+     * first or change their target to another service account.
+     *
+     * @example
+     * ```ts
+     * const betaServiceAccount =
+     *   await client.beta.organization.serviceAccounts.archive(
+     *     'service_account_id',
+     *   );
+     * ```
+     */
+    archive(serviceAccountID, params = {}, options) {
+        const { betas } = params ?? {};
+        return this._client.post(path `/v1/organizations/service_accounts/${serviceAccountID}/archive?beta=true`, {
+            ...options,
+            headers: buildHeaders([
+                { ...(betas?.toString() != null ? { 'anthropic-beta': betas?.toString() } : undefined) },
+                options?.headers,
+            ]),
+        });
+    }
+}
+ServiceAccounts.Workspaces = Workspaces;
+//# sourceMappingURL=service-accounts.mjs.map

package/resources/beta/organization/service-accounts/service-accounts.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-accounts.mjs","sourceRoot":"","sources":["../../../../src/resources/beta/organization/service-accounts/service-accounts.ts"],"names":[],"mappings":"AAAA,sFAAsF;AAEtF,OAAO,EAAE,WAAW,EAAE,sCAAkC;AAExD,OAAO,KAAK,aAAa,yBAAqB;AAC9C,OAAO,EAKL,UAAU,GACX,yBAAqB;AAGtB,OAAO,EAAE,UAAU,EAAsC,wCAAoC;AAC7F,OAAO,EAAE,YAAY,EAAE,yCAAqC;AAE5D,OAAO,EAAE,IAAI,EAAE,4CAAwC;AAEvD,MAAM,OAAO,eAAgB,SAAQ,WAAW;IAAhD;;QACE,eAAU,GAA6B,IAAI,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAmLpF,CAAC;IAjLC;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,MAAM,CAAC,MAAkC,EAAE,OAAwB;QACjE,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;QAClC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,8CAA8C,EAAE;YACvE,IAAI;YACJ,GAAG,OAAO;YACV,OAAO,EAAE,YAAY,CAAC;gBACpB,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE;gBACxF,OAAO,EAAE,OAAO;aACjB,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,QAAQ,CACN,gBAAwB,EACxB,SAA0D,EAAE,EAC5D,OAAwB;QAExB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAA,sCAAsC,gBAAgB,YAAY,EAAE;YAC9F,GAAG,OAAO;YACV,OAAO,EAAE,YAAY,CAAC;gBACpB,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE;gBACxF,OAAO,EAAE,OAAO;aACjB,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,MAAM,CACJ,gBAAwB,EACxB,MAAkC,EAClC,OAAwB;QAExB,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;QAClC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAA,sCAAsC,gBAAgB,YAAY,EAAE;YAC/F,IAAI;YACJ,GAAG,OAAO;YACV,OAAO,EAAE,YAAY,CAAC;gBACpB,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE;gBACxF,OAAO,EAAE,OAAO;aACjB,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACH,IAAI,CACF,SAAsD,EAAE,EACxD,OAAwB;QAExB,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QACzC,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAC5B,8CAA8C,EAC9C,CAAA,UAA8B,CAAA,EAC9B;YACE,KAAK;YACL,GAAG,OAAO;YACV,OAAO,EAAE,YAAY,CAAC;gBACpB,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE;gBACxF,OAAO,EAAE,OAAO;aACjB,CAAC;SACH,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,OAAO,CACL,gBAAwB,EACxB,SAAyD,EAAE,EAC3D,OAAwB;QAExB,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAA,sCAAsC,gBAAgB,oBAAoB,EAAE;YACvG,GAAG,OAAO;YACV,OAAO,EAAE,YAAY,CAAC;gBACpB,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE;gBACxF,OAAO,EAAE,OAAO;aACjB,CAAC;SACH,CAAC,CAAC;IACL,CAAC;CACF;AAwKD,eAAe,CAAC,UAAU,GAAG,UAAU,CAAC"}

package/resources/beta/organization/service-accounts/workspaces.d.mts

@@ -0,0 +1,141 @@
+import { APIResource } from "../../../../core/resource.mjs";
+import * as BetaAPI from "../../beta.mjs";
+import * as ServiceAccountsAPI from "./service-accounts.mjs";
+import { BetaServiceAccountWorkspaceMembersPageCursor } from "./service-accounts.mjs";
+import * as OrganizationWorkspacesAPI from "../workspaces/workspaces.mjs";
+import { APIPromise } from "../../../../core/api-promise.mjs";
+import { type PageCursorParams, PagePromise } from "../../../../core/pagination.mjs";
+import { RequestOptions } from "../../../../internal/request-options.mjs";
+export declare class Workspaces extends APIResource {
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
+     *
+     * List the workspaces a service account is a member of.
+     *
+     * Each entry includes the service account's `workspace_role` in that workspace.
+     * Use `limit` and the `next_page` cursor to paginate. When the service account has
+     * no explicit default-workspace membership, the implicit (`implicit: true`)
+     * membership is returned as the first entry on the first page; with `limit=1` the
+     * first page may return up to 2 entries (the implicit entry plus one explicit
+     * membership) so a pagination cursor can be derived. Memberships are returned only
+     * while the service account is active. Without a `page` cursor, an archived
+     * service account returns an empty list. A `page` cursor that does not match an
+     * active membership returns a 400 invalid-request error. A cursor stops matching
+     * when the membership is removed, the workspace is deleted, or the service account
+     * is archived. Restart pagination from the first page to recover.
+     *
+     * @example
+     * ```ts
+     * // Automatically fetches more pages as needed.
+     * for await (const betaServiceAccountWorkspaceMember of client.beta.organization.serviceAccounts.workspaces.list(
+     *   'service_account_id',
+     * )) {
+     *   // ...
+     * }
+     * ```
+     */
+    list(serviceAccountID: string, params?: WorkspaceListParams | null | undefined, options?: RequestOptions): PagePromise<BetaServiceAccountWorkspaceMembersPageCursor, ServiceAccountsAPI.BetaServiceAccountWorkspaceMember>;
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
+     *
+     * Add a service account to a workspace with the given `workspace_role`.
+     *
+     * Mirror of `POST /workspaces/{workspace_id}/service_accounts`, addressed from the
+     * service-account side; both create the same membership. If the service account is
+     * already an explicit member of the workspace, its `workspace_role` is replaced
+     * with the value supplied here. Archived workspaces return 400. Archived service
+     * accounts cannot be added and are rejected.
+     *
+     * @example
+     * ```ts
+     * const betaServiceAccountWorkspaceMember =
+     *   await client.beta.organization.serviceAccounts.workspaces.add(
+     *     'service_account_id',
+     *     {
+     *       workspace_id: 'workspace_id',
+     *       workspace_role: 'workspace_admin',
+     *     },
+     *   );
+     * ```
+     */
+    add(serviceAccountID: string, params: WorkspaceAddParams, options?: RequestOptions): APIPromise<ServiceAccountsAPI.BetaServiceAccountWorkspaceMember>;
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
+     *
+     * Remove a service account from a workspace.
+     *
+     * Mirror of
+     * `DELETE /workspaces/{workspace_id}/service_accounts/{service_account_id}`,
+     * addressed from the service-account side. Removal is idempotent (returns 200 even
+     * if the membership was already removed). A DELETE against the implicit
+     * default-workspace membership returns 200 but is a no-op and the membership
+     * persists; deleting an explicit default-workspace row reverts to the implicit
+     * `workspace_user` membership. Archived workspaces return 400.
+     *
+     * @example
+     * ```ts
+     * const workspace =
+     *   await client.beta.organization.serviceAccounts.workspaces.remove(
+     *     'workspace_id',
+     *     { service_account_id: 'service_account_id' },
+     *   );
+     * ```
+     */
+    remove(workspaceID: string, params: WorkspaceRemoveParams, options?: RequestOptions): APIPromise<WorkspaceRemoveResponse>;
+}
+export interface WorkspaceRemoveResponse {
+    /**
+     * Tagged service account ID (`svac_...`) named in the delete request. Removal is
+     * idempotent; see the endpoint description for the implicit-membership no-op.
+     */
+    service_account_id: string;
+    type: 'service_account_workspace_member_deleted';
+    /**
+     * Tagged workspace ID (`wrkspc_...`) named in the delete request.
+     */
+    workspace_id: string;
+}
+export interface WorkspaceListParams extends PageCursorParams {
+    /**
+     * Header param: Optional header to specify the beta version(s) you want to use.
+     */
+    betas?: Array<BetaAPI.AnthropicBeta>;
+}
+export interface WorkspaceAddParams {
+    /**
+     * Body param: Tagged workspace ID to add the service account to.
+     */
+    workspace_id: string;
+    /**
+     * Body param: Role to assign to the service account in this workspace.
+     */
+    workspace_role: OrganizationWorkspacesAPI.BetaNoBillingWorkspaceRole;
+    /**
+     * Header param: Optional header to specify the beta version(s) you want to use.
+     */
+    betas?: Array<BetaAPI.AnthropicBeta>;
+}
+export interface WorkspaceRemoveParams {
+    /**
+     * Path param: ID of the service account.
+     */
+    service_account_id: string;
+    /**
+     * Header param: Optional header to specify the beta version(s) you want to use.
+     */
+    betas?: Array<BetaAPI.AnthropicBeta>;
+}
+export declare namespace Workspaces {
+    export { type WorkspaceRemoveResponse as WorkspaceRemoveResponse, type WorkspaceListParams as WorkspaceListParams, type WorkspaceAddParams as WorkspaceAddParams, type WorkspaceRemoveParams as WorkspaceRemoveParams, };
+}
+export { type BetaServiceAccountWorkspaceMembersPageCursor };
+//# sourceMappingURL=workspaces.d.mts.map

package/resources/beta/organization/service-accounts/workspaces.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaces.d.mts","sourceRoot":"","sources":["../../../../src/resources/beta/organization/service-accounts/workspaces.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,sCAAkC;AACxD,OAAO,KAAK,OAAO,uBAAmB;AACtC,OAAO,KAAK,kBAAkB,+BAA2B;AACzD,OAAO,EAAE,4CAA4C,EAAE,+BAA2B;AAClF,OAAO,KAAK,yBAAyB,qCAAiC;AACtE,OAAO,EAAE,UAAU,EAAE,yCAAqC;AAC1D,OAAO,EAAc,KAAK,gBAAgB,EAAE,WAAW,EAAE,wCAAoC;AAE7F,OAAO,EAAE,cAAc,EAAE,iDAA6C;AAGtE,qBAAa,UAAW,SAAQ,WAAW;IACzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACH,IAAI,CACF,gBAAgB,EAAE,MAAM,EACxB,MAAM,GAAE,mBAAmB,GAAG,IAAI,GAAG,SAAc,EACnD,OAAO,CAAC,EAAE,cAAc,GACvB,WAAW,CACZ,4CAA4C,EAC5C,kBAAkB,CAAC,iCAAiC,CACrD;IAgBD;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,GAAG,CACD,gBAAgB,EAAE,MAAM,EACxB,MAAM,EAAE,kBAAkB,EAC1B,OAAO,CAAC,EAAE,cAAc,GACvB,UAAU,CAAC,kBAAkB,CAAC,iCAAiC,CAAC;IAenE;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,MAAM,CACJ,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,qBAAqB,EAC7B,OAAO,CAAC,EAAE,cAAc,GACvB,UAAU,CAAC,uBAAuB,CAAC;CAavC;AAED,MAAM,WAAW,uBAAuB;IACtC;;;OAGG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAE3B,IAAI,EAAE,0CAA0C,CAAC;IAEjD;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mBAAoB,SAAQ,gBAAgB;IAC3D;;OAEG;IACH,KAAK,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC;IAErB;;OAEG;IACH,cAAc,EAAE,yBAAyB,CAAC,0BAA0B,CAAC;IAErE;;OAEG;IACH,KAAK,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAE3B;;OAEG;IACH,KAAK,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;CACtC;AAED,MAAM,CAAC,OAAO,WAAW,UAAU,CAAC;IAClC,OAAO,EACL,KAAK,uBAAuB,IAAI,uBAAuB,EACvD,KAAK,mBAAmB,IAAI,mBAAmB,EAC/C,KAAK,kBAAkB,IAAI,kBAAkB,EAC7C,KAAK,qBAAqB,IAAI,qBAAqB,GACpD,CAAC;CACH;AAED,OAAO,EAAE,KAAK,4CAA4C,EAAE,CAAC"}

package/resources/beta/organization/service-accounts/workspaces.d.ts

@@ -0,0 +1,141 @@
+import { APIResource } from "../../../../core/resource.js";
+import * as BetaAPI from "../../beta.js";
+import * as ServiceAccountsAPI from "./service-accounts.js";
+import { BetaServiceAccountWorkspaceMembersPageCursor } from "./service-accounts.js";
+import * as OrganizationWorkspacesAPI from "../workspaces/workspaces.js";
+import { APIPromise } from "../../../../core/api-promise.js";
+import { type PageCursorParams, PagePromise } from "../../../../core/pagination.js";
+import { RequestOptions } from "../../../../internal/request-options.js";
+export declare class Workspaces extends APIResource {
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
+     *
+     * List the workspaces a service account is a member of.
+     *
+     * Each entry includes the service account's `workspace_role` in that workspace.
+     * Use `limit` and the `next_page` cursor to paginate. When the service account has
+     * no explicit default-workspace membership, the implicit (`implicit: true`)
+     * membership is returned as the first entry on the first page; with `limit=1` the
+     * first page may return up to 2 entries (the implicit entry plus one explicit
+     * membership) so a pagination cursor can be derived. Memberships are returned only
+     * while the service account is active. Without a `page` cursor, an archived
+     * service account returns an empty list. A `page` cursor that does not match an
+     * active membership returns a 400 invalid-request error. A cursor stops matching
+     * when the membership is removed, the workspace is deleted, or the service account
+     * is archived. Restart pagination from the first page to recover.
+     *
+     * @example
+     * ```ts
+     * // Automatically fetches more pages as needed.
+     * for await (const betaServiceAccountWorkspaceMember of client.beta.organization.serviceAccounts.workspaces.list(
+     *   'service_account_id',
+     * )) {
+     *   // ...
+     * }
+     * ```
+     */
+    list(serviceAccountID: string, params?: WorkspaceListParams | null | undefined, options?: RequestOptions): PagePromise<BetaServiceAccountWorkspaceMembersPageCursor, ServiceAccountsAPI.BetaServiceAccountWorkspaceMember>;
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
+     *
+     * Add a service account to a workspace with the given `workspace_role`.
+     *
+     * Mirror of `POST /workspaces/{workspace_id}/service_accounts`, addressed from the
+     * service-account side; both create the same membership. If the service account is
+     * already an explicit member of the workspace, its `workspace_role` is replaced
+     * with the value supplied here. Archived workspaces return 400. Archived service
+     * accounts cannot be added and are rejected.
+     *
+     * @example
+     * ```ts
+     * const betaServiceAccountWorkspaceMember =
+     *   await client.beta.organization.serviceAccounts.workspaces.add(
+     *     'service_account_id',
+     *     {
+     *       workspace_id: 'workspace_id',
+     *       workspace_role: 'workspace_admin',
+     *     },
+     *   );
+     * ```
+     */
+    add(serviceAccountID: string, params: WorkspaceAddParams, options?: RequestOptions): APIPromise<ServiceAccountsAPI.BetaServiceAccountWorkspaceMember>;
+    /**
+     * **Requires an OAuth access token with the `org:admin` scope**, from
+     * `ant auth login --scope org:admin` or a workload identity federation rule; Admin
+     * API keys are not accepted. See
+     * [Manage WIF with the Admin API](/docs/en/manage-claude/wif-admin-api).
+     *
+     * Remove a service account from a workspace.
+     *
+     * Mirror of
+     * `DELETE /workspaces/{workspace_id}/service_accounts/{service_account_id}`,
+     * addressed from the service-account side. Removal is idempotent (returns 200 even
+     * if the membership was already removed). A DELETE against the implicit
+     * default-workspace membership returns 200 but is a no-op and the membership
+     * persists; deleting an explicit default-workspace row reverts to the implicit
+     * `workspace_user` membership. Archived workspaces return 400.
+     *
+     * @example
+     * ```ts
+     * const workspace =
+     *   await client.beta.organization.serviceAccounts.workspaces.remove(
+     *     'workspace_id',
+     *     { service_account_id: 'service_account_id' },
+     *   );
+     * ```
+     */
+    remove(workspaceID: string, params: WorkspaceRemoveParams, options?: RequestOptions): APIPromise<WorkspaceRemoveResponse>;
+}
+export interface WorkspaceRemoveResponse {
+    /**
+     * Tagged service account ID (`svac_...`) named in the delete request. Removal is
+     * idempotent; see the endpoint description for the implicit-membership no-op.
+     */
+    service_account_id: string;
+    type: 'service_account_workspace_member_deleted';
+    /**
+     * Tagged workspace ID (`wrkspc_...`) named in the delete request.
+     */
+    workspace_id: string;
+}
+export interface WorkspaceListParams extends PageCursorParams {
+    /**
+     * Header param: Optional header to specify the beta version(s) you want to use.
+     */
+    betas?: Array<BetaAPI.AnthropicBeta>;
+}
+export interface WorkspaceAddParams {
+    /**
+     * Body param: Tagged workspace ID to add the service account to.
+     */
+    workspace_id: string;
+    /**
+     * Body param: Role to assign to the service account in this workspace.
+     */
+    workspace_role: OrganizationWorkspacesAPI.BetaNoBillingWorkspaceRole;
+    /**
+     * Header param: Optional header to specify the beta version(s) you want to use.
+     */
+    betas?: Array<BetaAPI.AnthropicBeta>;
+}
+export interface WorkspaceRemoveParams {
+    /**
+     * Path param: ID of the service account.
+     */
+    service_account_id: string;
+    /**
+     * Header param: Optional header to specify the beta version(s) you want to use.
+     */
+    betas?: Array<BetaAPI.AnthropicBeta>;
+}
+export declare namespace Workspaces {
+    export { type WorkspaceRemoveResponse as WorkspaceRemoveResponse, type WorkspaceListParams as WorkspaceListParams, type WorkspaceAddParams as WorkspaceAddParams, type WorkspaceRemoveParams as WorkspaceRemoveParams, };
+}
+export { type BetaServiceAccountWorkspaceMembersPageCursor };
+//# sourceMappingURL=workspaces.d.ts.map

package/resources/beta/organization/service-accounts/workspaces.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspaces.d.ts","sourceRoot":"","sources":["../../../../src/resources/beta/organization/service-accounts/workspaces.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,qCAAkC;AACxD,OAAO,KAAK,OAAO,sBAAmB;AACtC,OAAO,KAAK,kBAAkB,8BAA2B;AACzD,OAAO,EAAE,4CAA4C,EAAE,8BAA2B;AAClF,OAAO,KAAK,yBAAyB,oCAAiC;AACtE,OAAO,EAAE,UAAU,EAAE,wCAAqC;AAC1D,OAAO,EAAc,KAAK,gBAAgB,EAAE,WAAW,EAAE,uCAAoC;AAE7F,OAAO,EAAE,cAAc,EAAE,gDAA6C;AAGtE,qBAAa,UAAW,SAAQ,WAAW;IACzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACH,IAAI,CACF,gBAAgB,EAAE,MAAM,EACxB,MAAM,GAAE,mBAAmB,GAAG,IAAI,GAAG,SAAc,EACnD,OAAO,CAAC,EAAE,cAAc,GACvB,WAAW,CACZ,4CAA4C,EAC5C,kBAAkB,CAAC,iCAAiC,CACrD;IAgBD;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,GAAG,CACD,gBAAgB,EAAE,MAAM,EACxB,MAAM,EAAE,kBAAkB,EAC1B,OAAO,CAAC,EAAE,cAAc,GACvB,UAAU,CAAC,kBAAkB,CAAC,iCAAiC,CAAC;IAenE;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,MAAM,CACJ,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,qBAAqB,EAC7B,OAAO,CAAC,EAAE,cAAc,GACvB,UAAU,CAAC,uBAAuB,CAAC;CAavC;AAED,MAAM,WAAW,uBAAuB;IACtC;;;OAGG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAE3B,IAAI,EAAE,0CAA0C,CAAC;IAEjD;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mBAAoB,SAAQ,gBAAgB;IAC3D;;OAEG;IACH,KAAK,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC;IAErB;;OAEG;IACH,cAAc,EAAE,yBAAyB,CAAC,0BAA0B,CAAC;IAErE;;OAEG;IACH,KAAK,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,qBAAqB;IACpC;;OAEG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAE3B;;OAEG;IACH,KAAK,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;CACtC;AAED,MAAM,CAAC,OAAO,WAAW,UAAU,CAAC;IAClC,OAAO,EACL,KAAK,uBAAuB,IAAI,uBAAuB,EACvD,KAAK,mBAAmB,IAAI,mBAAmB,EAC/C,KAAK,kBAAkB,IAAI,kBAAkB,EAC7C,KAAK,qBAAqB,IAAI,qBAAqB,GACpD,CAAC;CACH;AAED,OAAO,EAAE,KAAK,4CAA4C,EAAE,CAAC"}